Whitelisting of Application Metadata

To solve the problem of restricting access to Employee and Manager users, the full HRM application is deployed with truncated application metadata. The application.xml stores the list of all pages whose metadata should be present in the metadata database (pal db). The page entry for each external facing application has an additional property with the roles to which these pages are tied to. The key value generator has a new property "externalApplication" to generate metadata for that external application.

For Example:

If a site needs Employee and Manager related pages to be external facing, then the externalApplication property should be set with the following value:

externalApplication=employeeManager

If a site needs Travel and Procurement related pages to be external facing, then the externalApplication property should be set with the following value:

externalApplication=travelExpense,procurementPortal

If a site needs just Procurement related pages to be external facing, then the externalApplication property should be set with the following value:

externalApplication=procurementPortal